CFP Defense+ Clean PC mode?

Anybody can explain how does the clean PC mode works? When I switch to clean PC mode it doesn,t scan the HD, how does then it marks all executables on HD trusted?

Thanks

 

Re: CFP Defnece+ Clean PC mode?

I assume since it tracks down in real time what is new, it will create rules for "old" files as they are used.

 

Re: CFP Defnece+ Clean PC mode?

So it means that if I turn off file protection in CFP, clean PC mode will become useless. Am i true?

 

Re: CFP Defnece+ Clean PC mode?

No. Clean PC Mode will affect all modules, not just file protection. Since it does not scan the HD i am guessing when files are open CFP will read their creation/modification date to see if it was made after or before Clean PC Mode was activated. Their is probably a time kept when Clean PC Mode was activated inside CFP instead of using the windows clock or else it would be easily bypassed by malware. As Pedro says it works in real-time. You can see for yourself by switching to Safe mode and switching back to Clean PC Mode it will make all current files be safe.

 

Re: CFP Defnece+ Clean PC mode?

No, I don,t think it,s like this. I did a test.

I put two exes on my PC. aa.exe and bb.exe. I switched to clean PC mode. Now I executed aa.exe, it was allowed to run and automatic allow rules were created. I switched back to learn with safe mode. I executed bb.exe, i got a warning popup.

I put Defence+ again in clean PC mode. I downloaded two exe from internet via opera, the new exe craetion( download) was allowed by premade rules or Opera. I run, first exe, no popups. I change to Learn with safe mode, run second exe and got the pop up.

I am too confused. I just wonder what is the use of Appliaction Execution rules in clean PC mode?

But i am getting weired resluts sometimes. I am not able to reproduce them consistently and not able to understand it at all!

 

Re: CFP Defnece+ Clean PC mode?

Aigle,

My reason for removing it. I follow them for our vista64 box, but I suppose will have to wait until it is really ready to play with the different program settings.

It is freeware after all, so I can understand that the go life when the main and most likely used settings work okay. With so many options it is a hell of a job to get this program tested anyway. So do not take this as Comodo bashing. Out of the box it runs fine.

 

Re: CFP Defnece+ Clean PC mode?

Needs a lot of settings I agree!

 

Re: CFP Defnece+ Clean PC mode?

Any other user pls?
I guess there must be many users using this mode.

 

Re: CFP Defnece+ Clean PC mode?

Mr. aigle, I did 32-bit assembly language for Comp Sci.
I also created comp related circuits in Physics Lab.
Comodo is pushing this "Clean PC" mode as revolutionary.
I still don't understand how they can make it work.
Maybe I should've gone for my Phd.
I did run it for a while in that mode, but then I uninstalled, reinstalled, and now I run it in Paranoid mode.
Pop-up Circus, yes, but at least now I feel comfortable knowing what is going on.

 

Re: CFP Defnece+ Clean PC mode?

Just wanted to add:
I use Comodo Firewall Pro, and still testing Comodo Memory Firewall, and Comodo BoClean, but something I just can't put my finger on...
All of these are on workstations which have to go through corporate level firewall products.

Something just doesn't feel right.

Of course, that is just my opinion, or rather "feeling"; however, I am a nobody.

 

Re: CFP Defence+ Clean PC mode?

I think file protection cannot be deactivated (is working even in basic firewall mode). If you disable it you are allowing all changes, not stopping the monitoring.

As Comodo keeps a list of new/modified files (aka My Pending Files) it can suppose that if a file is in the hard drive and not in the list then it's "safe".

 

Re: CFP Defence+ Clean PC mode?

Are u sure about this? It,s part of Defence+ so how it can run in FW only mode?

 

Re: CFP Defence+ Clean PC mode?

Put defense+ in paranoid mode (even if deactivated) and change the defense+ policy of explorer.exe to ask about modification of protected files. Now try to rename the executable of your browser.

 

Re: CFP Defence+ Clean PC mode?

U can,t do it. It can either be disabled or in paranoid or any other mode.

 

Re: CFP Defnece+ Clean PC mode?

I don,t expect clean PC mode to be revlutionary. I even don,t understand it ATM!

 

Re: CFP Defence+ Clean PC mode?

With deactivated I mean "Deactivate the Defense+ permanently" (Basic Firewall).

 

What i have a hard time with is exactly that: i turn D+ off, but it's not completely off - file protection is on, and the rules are applied.

Since it's not completely on either, and doesn't do file integrity check, can i trust that it will see what's going on?